Senior Security Engineer – Microsoft Sentinel / SIEM

We’re Hiring: Senior Azure Security Engineer – Microsoft Sentinel / SIEM
Location: Bengaluru
We are looking for a Senior Azure Security Engineer with strong hands-on experience in Microsoft Sentinel, Azure Security, SIEM integrations, telemetry engineering, KQL, and detection engineering.
The role will focus on enterprise-scale SIEM onboarding, log integration design, telemetry pipeline engineering, security architecture validation, and operational troubleshooting.
Experience Required
8+ years of overall Security Engineering experience
6+ years of hands-on experience with enterprise SIEM platforms
Strong hands-on experience with Microsoft Sentinel
Strong Microsoft Azure Security experience
Advanced KQL and detection engineering experience
Strong experience in SIEM integration design and log onboarding
Experience with telemetry and log engineering at enterprise scale
Experience conducting security architecture and integration reviews
Experience mentoring junior engineers
Key Responsibilities
Qualify and assess new SIEM onboarding requirements and integrations
Review architecture, authentication, security controls, and connectivity requirements
Design and review log onboarding patterns and telemetry pipelines
Develop and maintain Data Collection Rules (DCRs), parsers, and transformations
Support ASIM normalization and security telemetry schema design
Estimate telemetry volumes and support retention and cost assessments
Develop and optimize KQL queries and detection use cases
Troubleshoot log ingestion, connectivity, authentication, and data-quality issues
Support onboarding of applications, infrastructure, cloud platforms, and security tools into the SIEM
Develop reusable onboarding standards, engineering patterns, and accelerators
Collaborate with Security Engineering, Threat Monitoring, Infrastructure, Technology, and platform teams
Provide technical guidance and mentoring to junior engineers
Required Technical Skills
Microsoft Azure: Entra ID, Networking, Log Analytics, Azure Monitor, Key Vault, RBAC
Microsoft Sentinel
SIEM platforms such as Splunk, QRadar, or Elastic
Log ingestion technologies including Azure Monitor Agent (AMA), Syslog, Logstash, Fluent Bit, and Beats
Data Collection Rules (DCRs)
KQL / Kusto Query Language
ASIM and SIEM data normalization
Detection engineering
Cloud Security Engineering
Linux and container platforms
Git and CI/CD practices
Telemetry and log pipeline engineering
Preferred Profile:
Strong experience delivering enterprise SIEM onboarding or migration programmes
Experience designing scalable and cost-efficient telemetry architectures
Strong understanding of security monitoring and detection engineering
Ability to translate business and security requirements into technical onboarding patterns
Strong troubleshooting and stakeholder-management skills
Experience working across Security Engineering, SOC, Infrastructure, and application teams

Work arrangement
Hybrid